vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm prior to 7.0.362 allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in a METHOD_NEITHER (1) IOCTL 0x8400000F or (2) IOCTL 0x84000013 request, which can be used to overwrite arbitrary memory locations.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
checkpoint zonealarm 6.1.744.001 |
||
checkpoint zonealarm 5.0.63.0 |
||
checkpoint zonealarm |